Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: JALtqr/gvr/Riu0mvjC1Yim4g2h8H/D5Z3E3hD9Icf4=
Subject key identifier: B6:22:9C:BC:B8:10:69:73:56:FE:49:07:08:E3:39:88:FB:8C:D2:5D
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 019F93FF948558917354C4853E2F9242B9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0F35
Signing time: Fri 24 Jul 2026 12:00:28 +0000
Manifest this update: Fri 24 Jul 2026 12:00:28 +0000
Manifest next update: Sat 25 Jul 2026 12:00:28 +0000
Files and hashes: 1: Eo8KA9T6HD9p4ZSTDc0r_PeW2ik.roa (hash: 6EGWa/823S4j3qzNZzVNi7+aLxh9oMMF178PdW3UF1g=)
2: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: wbx7wJflGFRQtXst8A5flmH/ynIXhNDayQ+Pch7/gio=)
3: uR6qk5DeglUWNbzyA8X_zxBn_Us.roa (hash: 7cX65e6MFwNlQSj+gYDD5WGRNzvo97dTNPuyxMqN7k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:94:85:58:91:73:54:c4:85:3e:2f:92:42:b9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jul 24 12:00:28 2026 GMT
Not After : Jul 25 12:00:28 2026 GMT
Subject: CN=b6229cbcb810697356fe490708e33988fb8cd25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:c1:02:3b:20:cd:0a:ce:a4:73:9f:b7:3c:
77:86:db:a7:a3:fe:53:e9:d8:12:73:11:9a:63:9e:
ff:5b:17:8b:39:9f:0f:18:07:b0:b0:65:c7:33:d6:
30:0c:f4:10:06:6c:88:6d:20:c8:e0:00:db:64:01:
9b:19:15:11:8a:26:e1:75:62:70:6a:a5:1d:d4:6d:
7b:98:78:da:23:cf:54:5c:62:52:e5:99:8d:8d:f9:
6c:3a:3d:5d:74:cf:63:71:0c:ed:5f:70:f6:a2:47:
f9:fc:fd:5d:77:27:27:0c:a9:6d:e2:fe:15:b5:85:
65:e3:8e:26:8c:82:30:61:e7:e1:40:e0:4c:b8:bf:
ba:9a:b3:bc:5a:20:00:e0:c2:69:89:aa:1a:88:cd:
06:8c:28:37:18:75:c9:2e:1b:53:25:ce:35:a5:88:
64:0b:c1:e9:55:ea:1e:f0:0c:40:d6:c7:8f:d6:1b:
d1:e9:c3:36:70:fc:25:ab:0b:6a:5b:df:3e:bd:ab:
4e:58:e7:c5:4d:92:b7:b0:78:19:bb:94:44:db:2e:
25:d3:46:88:9c:16:c0:e7:81:aa:ca:03:9b:76:ad:
c6:4c:8f:51:3c:60:47:0b:00:8b:20:75:79:0c:6c:
a7:3e:de:e3:a8:a9:2a:3c:32:3e:0e:fb:0e:f9:18:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:22:9C:BC:B8:10:69:73:56:FE:49:07:08:E3:39:88:FB:8C:D2:5D
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:31:9d:8a:4b:eb:bd:b1:3e:4d:1a:ac:64:0f:29:06:13:ac:
f2:7d:b8:90:c7:af:62:6d:f0:25:0d:68:fd:fa:17:95:fb:76:
d8:16:d5:46:ed:e4:67:48:ea:93:d9:92:60:59:f3:2c:7e:e8:
5e:f6:88:11:84:6a:27:73:8b:e5:31:4c:e2:15:23:d9:a6:f8:
7d:40:df:09:76:a8:91:98:50:67:5a:a7:7b:86:0e:f6:0b:b5:
ac:b6:ec:81:41:06:2b:73:9d:ed:c6:4d:21:60:62:5a:58:08:
ec:8a:81:36:4d:6c:fa:9a:3e:c0:66:85:1e:34:93:75:b0:9b:
4d:b1:4e:ad:b7:1e:00:e0:e3:40:e2:20:43:61:84:58:f7:61:
f7:a9:0e:57:a0:f9:5a:79:5d:3b:1a:e8:41:cb:c9:e9:0a:67:
78:da:61:4f:bb:3f:6d:7a:85:a5:b0:1e:42:45:e1:53:66:b7:
a8:73:ab:97:35:25:92:ce:95:16:22:e3:9f:ea:f4:03:b4:5a:
10:76:fd:e3:74:b4:06:f3:20:08:3a:fa:7b:06:85:6c:31:9d:
22:44:5f:80:95:60:dc:36:51:e1:02:c3:d8:ec:ab:2e:69:4f:
13:c9:9f:27:ef:85:f0:d8:9b:10:17:7a:e5:73:e6:b9:a9:83:
a8:4b:10:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:21:20 2026 by rpki-client